Solana Market

Security checks across malware telemetry and agentic risk

Overview

The skill advertises Solana price lookups, but it also includes undisclosed wallet transfer monitoring that can run continuously through Helius.

Review before installing. The advertised price lookup behavior is reasonable, but install only if you are comfortable with hidden wallet-monitoring functionality, third-party Helius queries, and a watch mode that can keep polling until stopped.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Description-Behavior Mismatch

High

Confidence: 93% confidence
Finding: The script implements wallet-specific whale-transfer tracking, including continuous monitoring, which is materially broader than the declared skill purpose of token price and market overview queries. This scope mismatch is dangerous because it introduces surveillance-style functionality and external API usage that users and reviewers would not reasonably expect from the manifest, reducing transparency and increasing the chance of covert data collection or policy-violating behavior.

Vague Triggers

Medium

Confidence: 84% confidence
Finding: The trigger phrases include very generic terms such as “价格”, “行情”, “市场”, and “多少钱”, which can match broad financial conversations outside the intended Solana-token price use case. Over-broad activation can cause the skill to run in the wrong context, leading to unnecessary external calls, misleading responses, or unintended handling of user requests that should be routed elsewhere.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal